ATM hack promises teller machine jackpot

Jun 26, 2010
A woman uses an Automated Teller Machine (ATM) in Los Angeles in 2008. Computer security researchers are heading to Las Vegas with a software hack that gets bank teller machines to spew out cash jackpots.

Computer security researchers are heading to Las Vegas with a software hack that gets bank teller machines to spew out cash jackpots.

Barnaby Jack of IOActive is slated to give a "Jackpotting Automated Teller Machines" presentation at the Black Hat USA conference in Sin City in late July.

"I've always liked the scene in 'Terminator 2' where John Connor walks up to an ATM, interfaces his Atari to the and retrieves cash from the machine," Jack said at the Black Hat website. "I think I've got that kid beat."

The researcher promised to bring two new model ATM machines from a pair of major vendors to demonstrate local and remote software attacks that result in large payouts.

Jack said he was originally going to reveal his findings at Black Hat in Las Vegas last year but that talk was "pulled at the last minute due to circumstances beyond my control."

"The upside to this is that there has been an additional year to research ATM attacks, and I'm armed with a whole new bag of tricks," he added.

IOActive told AFP on Friday that the manufacturers of vulnerable ATM machines have been alerted to the problem and that Jack's presentation will include ways to protect machines against attacks.

Explore further: Godzilla stomps back in ultra HD, wires intact

add to favorites email to friend print save as pdf

Related Stories

Microsoft probing new hole in IE security

Feb 03, 2010

Fresh from patching an Internet Explorer (IE) flaw exploited in cyberattacks on Google and other firms, Microsoft is looking into a newly exposed vulnerability in the browser software.

Recommended for you

Godzilla stomps back in ultra HD, wires intact

12 hours ago

At a humble Tokyo laboratory, Godzilla, including the 1954 black-and-white original, is stomping back with a digital makeover that delivers four times the image quality of high definition.

Overly polite drivers, not roadworks, cause traffic jams

Aug 25, 2014

British motorists who are too polite or timid in their driving style are the cause of lengthy traffic jams across the UK, particularly when faced with roadworks or lane closures, according to a leading Heriot-Watt ...

Voice, image give clues in hunt for Foley's killer

Aug 21, 2014

Police and intelligence services are using image analysis and voice-recognition software, studying social media postings and seeking human tips as they scramble to identify the militant recorded on a video ...

Smartphone-loss anxiety disorder

Aug 21, 2014

The smart phone has changed our behavior, sometimes for the better as we are now able to connect and engage with many more people than ever before, sometimes for the worse in that we may have become over-reliant on the connectivity ...

Why conspiracy theorists won't give up on MH17 and MH370

Aug 20, 2014

A huge criminal investigation is underway in the Netherlands, following the downing of flight MH17. Ten Dutch prosecutors and 200 policemen are involved in collecting evidence to present at the International Criminal Court in the Hague. The inv ...

User comments : 5

Adjust slider to filter visible comments by rank

Display comments: newest first

frajo
not rated yet Jun 26, 2010
I'd really like to know whether there were any ATM hacks back in those times when they still were running on OS/2.
dtxx
2.3 / 5 (3) Jun 26, 2010
The OS doesn't matter, I can guarantee you the software implementation is insecure.
hudres
not rated yet Jun 27, 2010
If he openly presents the fixes, that opens the door to new hacks. Does the word "security" mean anything to this guy?
plasticpower
5 / 5 (2) Jun 27, 2010
He's presenting at Black Hat. That should tell you all you need to know.
frajo
not rated yet Jun 27, 2010
The OS doesn't matter, I can guarantee you the software implementation is insecure.
You know the OS/2 sw implementation and you know of hacks into OS/2 run ATMs?
Any link to just one report of such a hack?
Or are you just inferring from what you know of windows?